Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vkXK9gV4l6lWWFXkt_tcONDL5Wc.roa
File: vkXK9gV4l6lWWFXkt_tcONDL5Wc.roa (raw, json)
Hash identifier: VY59fwCs91HCfZ4f3U4sHRSXx8v99/KBzF9t/RDYRWo=
Subject key identifier: BE:45:CA:F6:05:78:97:A9:56:58:55:E4:B7:FB:5C:38:D0:CB:E5:67
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0197FD4F18E54F979AB617FAF98C19210838
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vkXK9gV4l6lWWFXkt_tcONDL5Wc.roa
Signing time: Sat 12 Jul 2025 06:25:08 +0000
ROA not before: Sat 12 Jul 2025 06:25:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 329007
IP address blocks: 89.47.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 14:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fd:4f:18:e5:4f:97:9a:b6:17:fa:f9:8c:19:21:08:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jul 12 06:25:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=be45caf6057897a9565855e4b7fb5c38d0cbe567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:21:30:08:9c:b9:81:5c:c7:30:ea:31:81:1a:
37:b7:bc:c0:b2:17:f7:9c:a7:8b:59:cc:1b:1e:c7:
6d:5a:dd:3b:7d:66:21:78:09:4f:97:ec:e9:62:9b:
90:9d:2d:79:4c:af:ef:ab:6d:18:c1:a4:cc:45:51:
15:c0:b9:3f:ab:ff:a8:64:ae:41:b4:45:54:88:96:
bd:9e:4d:74:bf:3d:f3:05:e3:57:89:6a:4c:a0:22:
cd:64:79:26:d4:9c:19:4a:0c:e5:e6:d1:d9:a0:e2:
f2:91:ff:5a:7d:d8:1c:93:20:1b:40:c8:7a:e2:0c:
46:ee:ad:bd:ec:b0:30:a5:b7:e2:ac:6b:8f:95:59:
4d:1b:15:07:c3:cf:61:09:2c:48:9d:89:e0:98:0c:
32:d0:80:76:13:7d:2b:ac:66:70:f9:1b:94:c0:58:
7a:7e:1b:8c:8e:1f:08:5c:55:11:56:b1:89:2a:1f:
dc:ae:62:7d:50:8c:89:d4:6e:7a:66:84:77:4e:7a:
e0:44:c4:73:7a:bd:c5:c6:a4:a0:06:39:4d:bc:11:
45:42:1a:93:a0:98:6f:a2:34:b1:8d:3d:bd:37:11:
41:22:f2:8a:fc:46:55:f8:1e:0c:e0:dc:7d:22:5b:
4f:7d:e2:cd:d8:3c:2e:b0:eb:38:d4:a4:26:3a:36:
b1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:45:CA:F6:05:78:97:A9:56:58:55:E4:B7:FB:5C:38:D0:CB:E5:67
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/vkXK9gV4l6lWWFXkt_tcONDL5Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.100.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ae:04:dd:e9:b4:2b:da:32:05:8f:b6:db:11:3b:e7:ed:3b:
05:a4:8c:b4:e4:18:40:8b:5e:f5:17:16:e8:7c:03:1e:25:bd:
02:ec:e8:d6:3f:62:e3:c6:10:b2:39:9e:ae:6b:90:2a:fa:1f:
a9:81:65:6f:bf:78:61:04:8a:bd:14:bd:cd:3c:ea:f0:8b:46:
b0:6a:6b:30:03:ae:dc:0c:2b:8e:aa:a9:95:7b:31:36:f1:cd:
e0:fe:56:a3:7a:cd:09:5d:a9:54:bf:4a:7a:9a:5e:31:d1:56:
6f:21:62:f6:1a:ff:ed:d5:b2:16:74:a7:03:62:56:38:8a:fa:
79:64:9c:3f:1b:69:0a:8b:76:da:94:40:7c:46:2e:c8:13:5e:
ed:71:58:54:74:b6:e3:5d:e2:81:ab:d6:78:55:29:bd:18:1b:
d6:3a:74:be:6c:97:e8:09:24:35:46:f8:49:49:66:95:dc:cb:
44:85:bb:fd:f8:8b:5e:cf:b4:6d:c6:30:f9:e6:7d:52:f6:c9:
51:5b:a5:df:24:45:ed:8d:0c:06:65:6d:ce:1d:39:b7:41:36:
f4:ea:53:ed:7f:e9:a2:20:f9:c6:06:3c:80:56:19:2f:01:8f:
41:48:7c:58:35:ae:c3:5e:81:f9:7a:99:c4:d8:4b:58:df:dd:
37:c4:14:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:17:33 2025 by rpki-client